mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-10 03:02:58 +01:00
FIX: surilogcompress cron job not running
The suricata user was originally created with `/opt/so/conf/suricata` as its home directory. I think at some point we changed permissions on `/opt/so/conf` and at that point the `surilogcompress` cron job stopped working. Changing the home directory to `/nsm/suricata` works on all of my PROD systems (including Ubuntu and CentOS). For more information, please see: https://github.com/Security-Onion-Solutions/securityonion/issues/7133
This commit is contained in:
@@ -36,12 +36,12 @@ suricatagroup:
|
|||||||
- name: suricata
|
- name: suricata
|
||||||
- gid: 940
|
- gid: 940
|
||||||
|
|
||||||
# Add ES user
|
# Add Suricata user
|
||||||
suricata:
|
suricata:
|
||||||
user.present:
|
user.present:
|
||||||
- uid: 940
|
- uid: 940
|
||||||
- gid: 940
|
- gid: 940
|
||||||
- home: /opt/so/conf/suricata
|
- home: /nsm/suricata
|
||||||
- createhome: False
|
- createhome: False
|
||||||
|
|
||||||
suridir:
|
suridir:
|
||||||
|
|||||||
Reference in New Issue
Block a user